4.11.12-stable review

This is the start of the stable review cycle for the 4.11.12 release. There are 88 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri Jul 21 10:07:36 UTC 2017. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.11.12-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.11.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.11.12-rc1

Haozhong Zhang <[email protected]>
kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS

Jim Mattson <[email protected]>
kvm: vmx: Check value written to IA32_BNDCFGS

Jim Mattson <[email protected]>
kvm: x86: Guest BNDCFGS requires guest MPX support

Jim Mattson <[email protected]>
kvm: vmx: Do not disable intercepts for BNDCFGS

Dan Carpenter <[email protected]>
PM / QoS: return -EINVAL for bogus strings

Ville Syrjälä <[email protected]>
ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown

Thomas Gleixner <[email protected]>
PM / wakeirq: Convert to SRCU

Peter Zijlstra <[email protected]>
sched/topology: Fix overlapping sched_group_mask

Lauro Ramos Venancio <[email protected]>
sched/topology: Optimize build_group_mask()

Peter Zijlstra <[email protected]>
sched/topology: Fix building of overlapping sched-groups

Peter Zijlstra <[email protected]>
sched/fair, cpumask: Export for_each_cpu_wrap()

Horia Geantă <[email protected]>
crypto: caam - fix signals handling

David Gstir <[email protected]>
crypto: caam - properly set IV after {en,de}crypt

Herbert Xu <[email protected]>
crypto: sha1-ssse3 - Disable avx2

Gilad Ben-Yossef <[email protected]>
crypto: atmel - only treat EBUSY as transient if backlog

Martin Hicks <[email protected]>
crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD

Helge Deller <[email protected]>
mm: fix overflow check in expand_upwards()

Andy Lutomirski <[email protected]>
selftests/capabilities: Fix the test_execve test

Eric W. Biederman <[email protected]>
mnt: Make propagate_umount less slow for overlapping mount propagation trees

Eric W. Biederman <[email protected]>
mnt: In propgate_umount handle visiting mounts in any order

Eric W. Biederman <[email protected]>
mnt: In umount propagation reparent in a separate pass

Michael Kelley <[email protected]>
Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page

Johan Hovold <[email protected]>
nvmem: core: fix leaks on registration errors

Paul E. McKenney <[email protected]>
rcu: Add memory barriers for NOCB leader wakeup

Adam Borowski <[email protected]>
vt: fix unchecked __put_user() in tioclinux ioctls

Dong Bo <[email protected]>
arm64: Preventing READ_IMPLIES_EXEC propagation

Marc Zyngier <[email protected]>
ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers

Balbir Singh <[email protected]>
powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR

Kees Cook <[email protected]>
exec: Limit arg stack to at most 75% of _STK_LIM

Kees Cook <[email protected]>
s390: reduce ELF_ET_DYN_BASE

Kees Cook <[email protected]>
powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB

Kees Cook <[email protected]>
arm64: move ELF_ET_DYN_BASE to 4GB / 4MB

Kees Cook <[email protected]>
arm: move ELF_ET_DYN_BASE to 4MB

Kees Cook <[email protected]>
binfmt_elf: use ELF_ET_DYN_BASE only for PIE

Cyril Bur <[email protected]>
checkpatch: silence perl 5.26.0 unescaped left brace warnings

Sahitya Tummala <[email protected]>

    fs/dcache.c: fix spin lockup issue on nlru->lock

Sahitya Tummala <[email protected]>
mm/list_lru.c: fix list_lru_count_node() to be race free

Marcin Nowakowski <[email protected]>
kernel/extable.c: mark core_kernel_text notrace

Kirill A. Shutemov <[email protected]>
thp, mm: fix crash due race in MADV_FREE handling

Ben Hutchings <[email protected]>
tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: Depth

Helge Deller <[email protected]>
parisc/mm: Ensure IRQs are off in switch_mm()

Thomas Bogendoerfer <[email protected]>
parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs

Eric Biggers <[email protected]>
parisc: use compat_sys_keyctl()

Helge Deller <[email protected]>
parisc: Report SIGSEGV instead of SIGBUS when running out of stack

Suzuki K Poulose <[email protected]>
irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity

Alex Deucher <[email protected]>
drm/amdgpu/gfx6: properly cache mc_arb_ramcfg

Srinivas Dasari <[email protected]>
cfg80211: Check if NAN service ID is of expected size

Srinivas Dasari <[email protected]>
cfg80211: Check if PMKID attribute is of expected size

Srinivas Dasari <[email protected]>
cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES

Srinivas Dasari <[email protected]>

    cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE

Daniel Kiper <[email protected]>
efi: Process the MEMATTR table only if EFI_MEMMAP is enabled

Peter S. Housel <[email protected]>
brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain

Christophe Jaillet <[email protected]>
brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach'

Bart Van Assche <[email protected]>
block: Fix a blk_exit_rl() regression

Nitin Gupta <[email protected]>
sparc64: Fix gup_huge_pmd

Nagarathnam Muthusamy <[email protected]>
Adding the type of exported symbols

Nagarathnam Muthusamy <[email protected]>
sed regex in Makefile.build requires line break between exported symbols

Nagarathnam Muthusamy <[email protected]>
Adding asm-prototypes.h for genksyms to generate crc

Bert Kenward <[email protected]>
sfc: don't read beyond unicast address list

Arend van Spriel <[email protected]>
brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()

Eduardo Valentin <[email protected]>
bridge: mdb: fix leak on complete_info ptr on fail path

WANG Cong <[email protected]>
tap: convert a mutex to a spinlock

Guilherme G. Piccoli <[email protected]>
cxgb4: fix BUG() on interrupt deallocating path of ULD

Huy Nguyen <[email protected]>

    net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff

Sowmini Varadhan <[email protected]>
rds: tcp: use sock_create_lite() to create the accept socket

Nikolay Aleksandrov <[email protected]>
vrf: fix bug_on triggered by rx when destroying a vrf

David Ahern <[email protected]>
net: ipv6: Compare lwstate in detecting duplicate nexthops

Derek Chickles <[email protected]>
liquidio: fix bug in soft reset failure detection

Alban Browaeys <[email protected]>
net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64

Jiri Benc <[email protected]>
geneve: fix hlist corruption

Jiri Benc <[email protected]>
vxlan: fix hlist corruption

Sabrina Dubroca <[email protected]>
ipv6: dad: don't remove dynamic addresses if link is down

Gal Pressman <[email protected]>
net/mlx5e: Fix TX carrier errors report in get stats ndo

Mohamad Haj Yahia <[email protected]>
net/mlx5: Cancel delayed recovery work when unloading the driver

Michal Kubeček <[email protected]>
net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()

Daniel Borkmann <[email protected]>
bpf: prevent leaking pointer via xadd on unpriviledged

Dan Carpenter <[email protected]>
rocker: move dereference before free

Ido Schimmel <[email protected]>
mlxsw: spectrum_router: Fix NULL pointer dereference

Gao Feng <[email protected]>
net: sched: Fix one possible panic when no destroy callback

Jason Wang <[email protected]>
virtio-net: serialize tx routine during reset

Eric Dumazet <[email protected]>
net: prevent sign extension in dev_get_stats()

WANG Cong <[email protected]>
tcp: reset sk_rx_dst in tcp_disconnect()

Richard Cochran <[email protected]>
net: dp83640: Avoid NULL pointer dereference.

Michal Kubeček <[email protected]>
net: account for current skb length when deciding about UFO

Martin Habets <[email protected]>
sfc: Fix MCDI command size for filter operations

Arnd Bergmann <[email protected]>

    netvsc: don't access netdev->num_rx_queues directly

WANG Cong <[email protected]>
ipv6: avoid unregistering inet6_dev for loopback

Zach Brown <[email protected]>
net/phy: micrel: configure intterupts after autoneg workaround

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/include/asm/elf.h                         |   8 +-
 arch/arm64/boot/dts/marvell/armada-37xx.dtsi       |  12 +-
 arch/arm64/include/asm/elf.h                       |  18 +-
 arch/parisc/include/asm/dma-mapping.h              |  11 +-
 arch/parisc/include/asm/mmu_context.h              |  15 +-
 arch/parisc/kernel/syscall_table.S                 |   2 +-
 arch/parisc/mm/fault.c                             |   2 +-
 arch/powerpc/include/asm/elf.h                     |  13 +-
 arch/powerpc/kernel/misc_64.S                      |  12 ++
 arch/s390/include/asm/elf.h                        |  15 +-
 arch/sparc/include/asm/asm-prototypes.h            |  24 +++
 arch/sparc/lib/atomic_64.S                         |  44 +++--
 arch/sparc/lib/checksum_64.S                       |   1 +
 arch/sparc/lib/csum_copy.S                         |   1 +
 arch/sparc/lib/memscan_64.S                        |   2 +
 arch/sparc/lib/memset.S                            |   1 +
 arch/sparc/mm/gup.c                                |   4 +-
 arch/x86/crypto/sha1_ssse3_glue.c                  |   2 +-
 arch/x86/include/asm/elf.h                         |  13 +-
 arch/x86/include/asm/msr-index.h                   |   2 +
 arch/x86/kvm/cpuid.h                               |   8 +
 arch/x86/kvm/vmx.c                                 |  10 +-
 block/blk-sysfs.c                                  |  34 ++--
 drivers/base/power/sysfs.c                         |   2 +
 drivers/base/power/wakeup.c                        |  32 ++--
 drivers/crypto/atmel-sha.c                         |   4 +-
 drivers/crypto/caam/caamalg.c                      |  20 +-
 drivers/crypto/caam/caamhash.c                     |   2 +-
 drivers/crypto/caam/key_gen.c                      |   2 +-
 drivers/crypto/talitos.c                           |   7 +-
 drivers/firmware/efi/efi.c                         |   3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |   3 +-
 drivers/hv/hv.c                                    |   7 +-
 drivers/irqchip/irq-gic-v3.c                       |   3 +
 .../ethernet/cavium/liquidio/cn23xx_pf_device.c    |   2 +-
 .../net/ethernet/cavium/liquidio/cn66xx_device.c   |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |  16 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_uld.c     |  42 ++--
 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   2 -
 drivers/net/ethernet/mellanox/mlx5/core/health.c   |  15 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   2 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |   3 +
 drivers/net/ethernet/rocker/rocker_ofdpa.c         |   2 +-
 drivers/net/ethernet/sfc/ef10.c                    |  16 +-
 drivers/net/geneve.c                               |  48 +++--
 drivers/net/hyperv/netvsc_drv.c                    |   4 +-
 drivers/net/phy/dp83640.c                          |   2 +-
 drivers/net/phy/micrel.c                           |   2 +
 drivers/net/tap.c                                  |  18 +-
 drivers/net/virtio_net.c                           |   1 +
 drivers/net/vrf.c                                  |  11 +-
 drivers/net/vxlan.c                                |  30 ++-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |   7 +-
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |   8 +-
 drivers/nvmem/core.c                               |  13 +-
 drivers/parisc/ccio-dma.c                          |  12 ++
 drivers/parisc/dino.c                              |   5 +-
 drivers/parisc/lba_pci.c                           |   6 +-
 drivers/parisc/sba_iommu.c                         |  14 ++
 drivers/tty/vt/vt.c                                |   6 +-
 fs/binfmt_elf.c                                    |  59 +++++-
 fs/dcache.c                                        |   5 +-
 fs/exec.c                                          |  11 +-
 fs/mount.h                                         |   1 +
 fs/namespace.c                                     |   1 +
 fs/pnode.c                                         | 212 ++++++++++++++++-----
 include/linux/blkdev.h                             |   2 +
 include/linux/cpumask.h                            |  17 ++
 include/linux/list_lru.h                           |   1 +
 include/linux/mlx5/driver.h                        |   1 +
 include/net/ip6_route.h                            |   8 +
 include/net/vxlan.h                                |  10 +-
 kernel/bpf/verifier.c                              |   5 +
 kernel/extable.c                                   |   2 +-
 kernel/rcu/tree_plugin.h                           |   2 +
 kernel/sched/fair.c                                |  45 +----
 kernel/sched/topology.c                            |  24 ++-
 lib/cpumask.c                                      |  32 ++++
 mm/huge_memory.c                                   |   2 +-
 mm/list_lru.c                                      |  14 +-
 mm/mmap.c                                          |   2 +-
 net/bridge/br_mdb.c                                |   3 +-
 net/core/dev.c                                     |  32 ++--
 net/ipv4/ip_output.c                               |   3 +-
 net/ipv4/tcp.c                                     |   2 +
 net/ipv6/addrconf.c                                |  23 +--
 net/ipv6/ip6_fib.c                                 |   5 +-
 net/ipv6/ip6_output.c                              |   2 +-
 net/ipv6/route.c                                   |   8 +-
 net/rds/tcp_listen.c                               |   2 +-
 net/sched/sch_api.c                                |   3 +-
 net/wireless/nl80211.c                             |  10 +-
 scripts/checkpatch.pl                              |   6 +-
 sound/x86/intel_hdmi_audio.c                       |   5 +
 tools/lib/lockdep/uinclude/linux/lockdep.h         |   2 +-
 tools/testing/selftests/bpf/test_verifier.c        |  66 +++++++
 tools/testing/selftests/capabilities/test_execve.c |   7 +-
 99 files changed, 892 insertions(+), 377 deletions(-)